Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
File:                     L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json)
Hash identifier:          iWPkVttNtLPa+6BW+WMm8gs56YqmowceUrBbPOzuFPE=
Subject key identifier:   F3:9B:D8:FF:78:1D:CA:5C:47:9B:89:FE:ED:0E:3D:FD:5F:29:08:C7
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Certificate issuer:       /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
Manifest number:          CE
Signing time:             Sun 05 Apr 2026 06:11:48 +0000
Manifest this update:     Sun 05 Apr 2026 06:11:47 +0000
Manifest next update:     Sun 12 Apr 2026 06:11:47 +0000
Files and hashes:         1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: BM4Qt6O4bI/uEyPA2vgqn4hcT3BQ7DHXRkPcuVEX4pw=)
                          2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: wMZyhnBV4sS1OoXti8AOYy1UKjGrlLJQob0X/T9aUpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
        Validity
            Not Before: Apr  5 06:11:47 2026 GMT
            Not After : Apr 12 06:11:47 2026 GMT
        Subject: CN=69d1fd24-76ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:78:dc:e1:8b:46:9b:d6:02:f2:04:9d:ac:
                    49:2e:e9:58:1a:01:e8:1e:95:f3:e7:e9:d8:d0:ef:
                    65:0a:cf:07:2a:d1:e5:b0:6c:4c:ab:08:46:87:d8:
                    25:04:5a:29:79:80:e0:95:3d:48:4a:e8:35:51:f6:
                    97:5f:91:9b:05:c9:93:9d:4a:ec:9f:d1:d6:db:93:
                    0d:e2:52:12:50:b1:b7:ca:71:a1:c0:a4:aa:68:20:
                    66:81:cb:84:fc:46:c3:cf:9d:68:74:77:f8:92:50:
                    94:80:f7:34:e4:e3:e6:82:9b:e2:5e:ea:b8:c0:57:
                    85:5e:01:83:c7:e0:5b:f7:57:e1:8a:b1:0a:d6:80:
                    f1:c0:e5:a5:60:fb:7b:b5:99:ea:cd:9f:39:ee:79:
                    46:fa:0c:08:f2:7d:34:25:0f:a6:76:17:8d:62:28:
                    e6:4c:21:d8:08:2f:15:00:a9:c0:78:41:d9:ab:e7:
                    14:fa:e7:ff:40:30:9c:ae:05:c8:fe:fc:32:47:9e:
                    e6:4c:94:a3:a8:47:50:48:87:ef:0d:eb:4a:3d:fd:
                    de:d9:14:87:a2:d9:f9:98:ce:f2:48:fa:8e:b1:cf:
                    44:f4:b5:19:7d:05:f3:75:45:25:75:2a:91:a1:93:
                    35:e6:c1:17:d0:74:43:b8:2e:74:90:c6:69:3a:66:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9B:D8:FF:78:1D:CA:5C:47:9B:89:FE:ED:0E:3D:FD:5F:29:08:C7
            X509v3 Authority Key Identifier:
                keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:77:18:96:a6:87:64:32:14:90:0a:f2:90:dc:83:f9:06:
         dc:b7:aa:73:c2:00:59:3f:04:20:7d:26:ec:da:d0:62:bf:cc:
         5e:b4:35:fc:13:e5:39:4b:a2:9e:51:bb:03:88:9c:09:d3:f4:
         f3:84:40:bf:25:62:41:43:3b:64:ec:22:18:70:d2:81:f2:52:
         11:0c:70:9c:d3:90:39:44:44:d5:63:12:de:29:81:28:b5:1e:
         f6:ff:24:c0:94:a1:03:3d:d2:18:4d:3e:51:b5:f6:56:0b:c2:
         98:fa:12:2f:15:10:88:8a:91:04:1d:6b:22:ea:27:f0:47:d9:
         6e:8d:81:6b:64:51:85:54:08:47:b2:d2:38:cd:47:b0:1d:39:
         56:3d:7e:0d:47:76:8c:1d:4c:ab:cf:a0:dd:14:2c:91:91:7c:
         2a:e5:ec:a3:d9:6e:44:57:76:17:c2:a6:c4:34:99:4b:b9:c6:
         8a:a7:62:87:5e:60:4e:ed:77:89:8c:f9:c4:d9:1e:5d:13:7f:
         21:84:dd:a1:50:da:a7:9b:63:d0:26:91:1a:94:62:11:4e:1c:
         7b:1b:5d:ff:8c:75:e6:7b:7c:34:e5:88:dc:5b:fe:16:9b:10:
         db:f8:75:10:ce:d9:be:78:6f:b8:25:5c:dc:94:4e:21:46:93:
         56:78:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:57 2026 by rpki-client